$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: sij+/Nn+WPQ86ySzxeWU4pdd6mtR0Z5lGVEqiA+EJ1E= Subject key identifier: 93:40:F3:B7:35:1C:C5:84:28:EA:6B:45:50:96:9C:10:CE:23:33:18 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 019D Signing time: Thu 21 Nov 2024 01:54:47 +0000 Manifest this update: Thu 21 Nov 2024 01:54:46 +0000 Manifest next update: Thu 28 Nov 2024 01:54:46 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: 6aJ6meJeA4SyL1I39vHXRhqA0Ne6rjQa8bnhC/26RNo=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mQyboEeKF6QIHVKg2jTKXrJTpGQjqbX5/841KTylhfs=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: 4fGpkM4uc7xbFXkRm01J1qXuwdve0jCOevf+O5zJcj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Nov 21 01:54:46 2024 GMT Not After : Nov 28 01:54:46 2024 GMT Subject: CN=673e92e6-e038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:22:c2:ea:9c:b0:e2:b8:8f:da:0f:ba:ae: 1e:e9:26:34:c5:ac:c0:19:ae:b7:f8:d5:c6:c7:b3: ec:06:9f:01:61:24:43:ef:10:eb:5d:0c:39:70:96: fc:9b:0b:e0:e0:da:0f:f6:71:03:b5:55:3a:78:2f: ee:d1:d2:a3:c0:a6:a0:af:2c:f4:fc:aa:62:41:4f: cd:fc:9d:81:dc:65:6b:62:2c:93:5a:ab:b8:14:54: 1f:46:49:14:26:d9:2e:08:94:18:48:a4:52:e0:34: 24:3b:ad:73:25:eb:3c:2c:64:93:cb:1b:d3:e2:50: 11:1c:fe:b3:4d:5d:6b:9d:43:3a:6f:73:d9:a3:ce: a0:24:d2:15:9c:b5:18:e1:33:38:ca:bc:60:7f:ed: 5f:00:81:d5:d4:7a:3f:53:87:a3:ca:d3:4a:9a:6e: c8:a3:30:98:fd:43:da:7f:b2:cb:de:aa:e6:dd:74: cd:1a:5a:12:a7:43:fd:ea:e5:d0:10:dd:c3:ac:b4: b1:c4:ef:1d:a7:92:06:69:6c:c8:9d:3e:45:48:76: 31:9c:42:45:e7:66:28:df:85:ec:aa:cb:c9:22:51: 98:80:b6:2f:3d:ab:23:7e:49:23:79:39:46:f4:b5: 79:a2:b9:4b:b6:f8:67:28:b2:83:0a:70:58:7f:8d: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:40:F3:B7:35:1C:C5:84:28:EA:6B:45:50:96:9C:10:CE:23:33:18 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:8e:53:dd:3a:ca:3f:d6:03:2b:d9:fc:2f:22:f4:40:5f: 23:57:3f:c2:8c:2d:0b:43:30:b9:f8:07:ae:2a:9f:dd:73:09: 7e:47:99:c2:aa:fe:be:64:1f:31:3e:05:c0:bc:99:41:b7:80: 6c:9f:48:f6:dc:00:d0:57:a8:c1:1c:f9:64:fb:76:81:83:43: bf:ac:3e:a5:52:dc:32:6d:55:fd:d9:9e:b2:8f:8c:e0:cb:4d: d0:66:43:03:be:91:44:24:da:72:fc:ee:55:2d:ed:20:73:41: a5:76:70:88:d3:ff:5e:a5:62:d9:29:5c:92:34:88:2e:e2:76: ab:d7:29:6a:9f:5d:ad:c2:f4:51:68:00:33:e4:4b:5c:2d:46: e8:26:bc:5d:3d:ce:fd:c2:50:b1:b2:26:89:a1:00:6d:a5:74: 2f:53:a2:12:c0:62:de:e6:47:04:17:6d:2b:0c:46:c3:c5:f5: 6c:b2:b0:13:d1:60:96:21:42:30:b8:f7:e9:99:c4:15:07:8c: 17:93:17:a0:17:8d:5a:8f:b0:8d:9f:68:da:0f:e6:a8:51:b7: f9:67:5d:7a:04:77:91:b3:9c:67:c3:54:04:20:98:b0:68:29: be:2f:df:b2:bc:a0:29:ce:95:e9:c0:86:06:64:6e:7b:bb:a4: 1b:21:37:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjQxMTIxMDE1NDQ2WhcNMjQxMTI4MDE1NDQ2WjAYMRYwFAYD VQQDEw02NzNlOTJlNi1lMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39oiwuqcsOK4j9oPuq4e6SY0xazAGa63+NXGx7PsBp8BYSRD7xDrXQw5cJb8 mwvg4NoP9nEDtVU6eC/u0dKjwKagryz0/KpiQU/N/J2B3GVrYiyTWqu4FFQfRkkU JtkuCJQYSKRS4DQkO61zJes8LGSTyxvT4lARHP6zTV1rnUM6b3PZo86gJNIVnLUY 4TM4yrxgf+1fAIHV1Ho/U4ejytNKmm7IozCY/UPaf7LL3qrm3XTNGloSp0P96uXQ EN3DrLSxxO8dp5IGaWzInT5FSHYxnEJF52Yo34XsqsvJIlGYgLYvPasjfkkjeTlG 9LV5orlLtvhnKLKDCnBYf43hcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNA87c1 HMWEKOprRVCWnBDOIzMYMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1I5T3TrKP9YDK9n8LyL0QF8jVz/CjC0LQzC5+AeuKp/dcwl+R5nC qv6+ZB8xPgXAvJlBt4Bsn0j23ADQV6jBHPlk+3aBg0O/rD6lUtwybVX92Z6yj4zg y03QZkMDvpFEJNpy/O5VLe0gc0GldnCI0/9epWLZKVySNIgu4nar1ylqn12twvRR aAAz5EtcLUboJrxdPc79wlCxsiaJoQBtpXQvU6ISwGLe5kcEF20rDEbDxfVssrAT 0WCWIUIwuPfpmcQVB4wXkxegF41aj7CNn2jaD+aoUbf5Z116BHeRs5xnw1QEIJiw aCm+L9+yvKApzpXpwIYGZG57u6QbITf3 -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:01 2024 by rpki-client on console-fra.rpki-client.org